An authenticated SQL injection vulnerability in the Ultimate Project Manager CRM PRO software allows attackers to exfiltrate sensitive user credentials from the database.

This is a blind SQL injection flaw (CWE-89) located in the /frontend/get_article_suggestion/ endpoint. An authenticated attacker can manipulate the search parameter to perform boolean-based inference, allowing for the unauthorized extraction of usernames and password hashes from the tbl_users table.

Successful exploitation poses a severe risk to organizational security, as it facilitates the theft of administrative or user account credentials. This unauthorized access can lead to lateral movement within the application, full data compromise, and potential system-wide takeover. The CVSS score of 8.2 reflects the high impact on data confidentiality and the relative ease of exploitation for an authenticated user.

Immediate Action: Contact the vendor or review the official Codexcube support portal to determine if a security patch exists for versions beyond 2.0.5, as no public patch is currently confirmed. If a patch is unavailable, restrict access to the /frontend/get_article_suggestion/ endpoint for all users.

Proactive Monitoring: Review application access logs for unusually high volumes of POST requests to the specified endpoint, particularly those containing SQL syntax or repetitive patterns indicative of automated boolean-based inference.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection payloads targeting the application search parameters.

Public Exploit Available: Yes, a published proof-of-concept exists in the Exploit Database (EDB-ID: 48912).

Given the availability of a functional exploit script, this vulnerability poses an immediate threat to the integrity of user credentials stored within the CRM. Security teams should prioritize restricting access to the affected endpoint and monitoring for signs of unauthorized database queries. If the software is no longer supported by the vendor, migration to a secure alternative is strongly advised.